Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.

Last Updated: January 2026

This Privacy Policy describes how Chirute Guest Lodge collects, uses, and discloses your personal information when you use our services.

1. Information We Collect

1.1 Personal Information

When you make a booking or contact us, we may collect:

  • Contact Information: Name, email address, phone number, postal address
  • Booking Details: Check-in/out dates, room preferences, special requests
  • Payment Information: Credit card details (processed securely via our payment processor)
  • Identification: Passport or ID number (for legal requirements)

1.2 Automatically Collected Information

When you visit our website, we may automatically collect:

  • IP address and device information
  • Browser type and version
  • Pages visited and time spent on site
  • Referring website information

2. How We Use Your Information

We use your personal information for the following purposes:

Purpose Information Used
Processing bookings and payments Contact details, payment information, booking dates
Providing customer service Contact details, booking history
Sending booking confirmations and updates Email address, phone number
Improving our services Website usage data, feedback
Legal compliance Identification documents (where required by law)

3. Legal Basis for Processing

We process your personal information based on:

  • Contractual necessity: To fulfill our booking agreement with you
  • Legal obligations: To comply with hospitality industry regulations
  • Legitimate interests: To improve our services and prevent fraud
  • Consent: For marketing communications (where applicable)

4. Data Sharing and Disclosure

We may share your information with:

Important: We do not sell your personal information to third parties.

4.1 Service Providers

  • Payment processors (for secure transaction handling)
  • Email service providers (for booking confirmations)
  • Property management systems
  • IT and cloud service providers

4.2 Legal Requirements

We may disclose your information if required by law, such as:

  • To comply with legal processes or government requests
  • To protect our rights, privacy, safety, or property
  • To enforce our terms and conditions

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • SSL encryption for data transmission
  • Secure payment processing (PCI DSS compliant)
  • Access controls and authentication systems
  • Regular security assessments and updates
  • Employee training on data protection

6. Data Retention

We retain your personal information only as long as necessary for:

  • Fulfilling the purposes outlined in this policy
  • Complying with legal obligations (typically 5-7 years for financial records)
  • Resolving disputes and enforcing agreements

After this period, your data will be securely deleted or anonymized.

7. Your Rights

Depending on your location, you may have the following rights:

Right Description
Access Request a copy of your personal information
Correction Request correction of inaccurate information
Deletion Request deletion of your personal information
Restriction Request restriction of processing
Objection Object to processing of your information
Portability Request transfer of your data to another service

To exercise these rights, please contact us using the details below.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Remember your preferences and settings
  • Analyze website traffic and usage patterns
  • Improve user experience
  • Provide relevant advertisements (through third-party services)

You can control cookies through your browser settings. However, disabling cookies may affect website functionality.

9. Third-Party Links

Our website may contain links to third-party websites (booking platforms, review sites, etc.). We are not responsible for the privacy practices of these websites. Please review their privacy policies separately.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

As a South African business, we primarily process data within South Africa. However, some service providers may be located outside South Africa. In such cases, we ensure appropriate safeguards are in place.

12. Changes to This Policy

We may update this Privacy Policy periodically. The "Last Updated" date at the top indicates when changes were made. We encourage you to review this policy regularly.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Data Protection Contact

Chirute Guest Lodge is committed to protecting your privacy. Our designated contact for data protection matters is:

privacy@chiruteguestlodge.co.za
+27 63 468 7460
8739 Ratsatsi St, Randfontein

Response time: We aim to respond to all privacy-related inquiries within 7 business days.

14. Complaints

If you have concerns about how we handle your personal information, you may lodge a complaint with:

  • Our internal team at the contact details above
  • The Information Regulator of South Africa (for South African residents)
  • Your local data protection authority (for international guests)